Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
05e7b420 by security tracker role at 2019-05-21T20:10:26Z
automatic update
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,41 @@
+CVE-2019-12265
+ RESERVED
+CVE-2019-12264
+ RESERVED
+CVE-2019-12263
+ RESERVED
+CVE-2019-12262
+ RESERVED
+CVE-2019-12261
+ RESERVED
+CVE-2019-12260
+ RESERVED
+CVE-2019-12259
+ RESERVED
+CVE-2019-12258
+ RESERVED
+CVE-2019-12257
+ RESERVED
+CVE-2019-12256
+ RESERVED
+CVE-2019-12255
+ RESERVED
+CVE-2019-12254
+ RESERVED
+CVE-2019-12253 (my little forum before 2.4.20 allows CSRF to delete posts, as
demonstr ...)
+ TODO: check
+CVE-2019-12252 (In Zoho ManageEngine ServiceDesk Plus through 10.5, users with
the low ...)
+ TODO: check
+CVE-2019-12251 (sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via
the index. ...)
+ TODO: check
+CVE-2019-12250 (IdentityServer IdentityServer4 through 2.4 has stored XSS via
the http ...)
+ TODO: check
+CVE-2019-12249
+ RESERVED
+CVE-2019-12248
+ RESERVED
+CVE-2019-12247
+ RESERVED
CVE-2019-12246
RESERVED
CVE-2019-12245
@@ -135,10 +173,10 @@ CVE-2019-12192
RESERVED
CVE-2019-12191
RESERVED
-CVE-2019-12190
- RESERVED
-CVE-2019-12189
- RESERVED
+CVE-2019-12190 (XSS was discovered in CentOS-WebPanel.com (aka CWP) CentOS Web
Panel t ...)
+ TODO: check
+CVE-2019-12189 (An issue was discovered in Zoho ManageEngine ServiceDesk Plus
9.3. The ...)
+ TODO: check
CVE-2019-12188
RESERVED
CVE-2019-12187
@@ -364,6 +402,7 @@ CVE-2019-12088
CVE-2019-12087 (** DISPUTED ** Samsung S9+, S10, and XCover 4 P(9.0) devices
can becom ...)
NOT-FOR-US: Samsung devices
CVE-2019-12086 (A Polymorphic Typing issue was discovered in FasterXML
jackson-databin ...)
+ {DLA-1798-1}
- jackson-databind 2.9.8-2 (bug #929177)
NOTE: https://github.com/FasterXML/jackson-databind/issues/2326
CVE-2019-12085
@@ -4550,11 +4589,9 @@ CVE-2019-10322
RESERVED
CVE-2019-10321
RESERVED
-CVE-2019-10320
- RESERVED
+CVE-2019-10320 (Jenkins Credentials Plugin 2.1.18 and earlier allowed users
with permi ...)
NOT-FOR-US: Jenkins plugin
-CVE-2019-10319
- RESERVED
+CVE-2019-10319 (A missing permission check in Jenkins PAM Authentication
Plugin 1.5 an ...)
NOT-FOR-US: Jenkins plugin
CVE-2019-10318 (Jenkins Azure AD Plugin 0.3.3 and earlier stored the client
secret une ...)
NOT-FOR-US: Jenkins Azure AD Plugin
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/05e7b420d30cfee69eaf2040ac8054108df76f2b
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/05e7b420d30cfee69eaf2040ac8054108df76f2b
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
